Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5736E8642CFA11ED877D6EB4F1222468.roa
File: 5736E8642CFA11ED877D6EB4F1222468.roa (raw, json)
Hash identifier: kLf9XL8VTyFkCO1cOZuMq6qzem3443MdVmVr+0XuE1E=
Subject key identifier: 1E:11:4E:CB:8E:E9:9F:93:F5:D5:A4:93:90:20:63:C2:29:C3:D5:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 188D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5736E8642CFA11ED877D6EB4F1222468.roa
Signing time: Mon 05 Sep 2022 09:08:43 +0000
ROA not before: Mon 05 Sep 2022 09:08:40 +0000
ROA not after: Wed 05 Jul 2023 09:08:40 +0000
asID: 22773
IP address blocks: 154.202.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6285 (0x188d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 5 09:08:40 2022 GMT
Not After : Jul 5 09:08:40 2023 GMT
Subject: CN=6315bc9b-eec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:84:1c:d2:d9:bc:2b:ac:f5:e5:b9:42:0f:
12:f4:31:0a:e0:58:cf:ba:8f:e4:ca:f9:ab:8e:8e:
a4:fd:95:71:90:5b:08:0d:25:a3:cd:76:0f:ba:ea:
81:6b:eb:12:86:a4:fe:f6:2a:b9:47:d4:88:1a:5d:
e4:77:67:4e:1d:f8:3d:49:36:77:5f:5a:eb:5a:87:
e7:a6:9d:5a:95:c5:cd:f6:c1:15:b4:73:37:d2:78:
fe:8c:91:52:e1:13:6f:c1:42:0d:b7:4e:98:97:5a:
21:1b:31:8a:55:cd:73:44:1f:9f:11:5e:74:47:45:
bb:33:be:f7:9e:98:a9:2e:0b:91:0d:4c:06:b2:22:
10:9e:63:48:af:d1:0e:bb:a8:1c:07:e5:ac:e3:5a:
ef:e8:7e:9c:07:84:9b:a5:bf:90:1c:26:ff:79:c1:
3c:76:e8:af:0e:3c:0d:a3:62:fd:02:85:bb:22:8e:
bc:e4:b1:37:4f:f9:2d:e3:d6:0d:87:c7:dd:a0:c3:
47:34:d6:1f:c0:f4:a8:b7:d8:8c:6c:ea:f6:62:e9:
85:fc:d3:a6:47:06:2e:5a:e1:bd:74:31:63:9e:d0:
7d:4d:7d:02:ef:3d:2d:1d:f5:53:ba:a3:44:dd:fa:
63:14:e5:95:5a:3f:07:a4:9c:32:55:05:e1:35:dd:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:11:4E:CB:8E:E9:9F:93:F5:D5:A4:93:90:20:63:C2:29:C3:D5:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5736E8642CFA11ED877D6EB4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.24.0/21
Signature Algorithm: sha256WithRSAEncryption
45:54:5f:68:d1:8f:7c:d9:ee:50:eb:ee:aa:fd:dc:04:1b:4d:
07:e0:8f:07:fb:05:66:26:9f:05:2c:b0:30:4c:28:e1:e0:8c:
d9:ff:9e:ba:d9:26:f9:02:9a:48:94:e7:18:30:6a:f9:68:e8:
44:cb:8d:6a:89:b0:87:67:b4:0a:a4:b0:94:45:01:57:2f:f8:
fd:1b:4d:b1:6f:61:be:6e:82:6e:fb:be:5c:60:0d:77:c5:58:
58:d9:e9:69:f6:c5:64:72:83:2a:07:95:a6:fd:ad:60:de:20:
d7:3c:01:d8:99:41:94:e4:36:9f:e5:0d:23:2c:c9:00:de:48:
91:55:b8:b4:98:ec:54:af:16:36:84:c7:48:4e:6c:b8:bd:b5:
e8:81:6f:22:d7:df:17:d3:d2:b2:7d:59:03:c9:61:59:85:f5:
5f:d6:23:ee:e9:3c:5a:4f:d1:94:dc:5d:c6:1a:50:66:3a:48:
8c:10:7a:e9:7d:e8:b0:f1:66:94:b5:8b:2c:89:bc:f2:31:13:
fa:db:1d:8c:c9:55:b7:c3:8e:0f:55:8e:54:37:2f:ec:29:f1:
76:5a:fd:72:44:be:f2:ed:25:78:09:ce:f5:85:01:04:84:06:
e0:c8:95:29:dc:d7:00:51:2a:fd:b0:aa:c2:a6:b9:63:37:88:
20:af:ca:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:05:38 2025 by rpki-client